Ansible Security Automation Workshop

Who is this workshop best for?

The workshop is intended as an introductory course for Ansible® Security Automation designed for people who want to learn how Ansible can be leveraged in security environments. The intended audience is technical professionals in automation [part of a cross-functional team or supporting other vertical teams in their company], security operations and vulnerability management. There is no previous knowledge about Ansible required to access this workshop, though it certainly helps.

Description

This workshop shows, step by step, how you can reach this goal using Ansible to orchestrate three investigation and response activities involving multiple security tools -  an enterprise firewall [CheckPoint Next Generation Firewall], an intrusion detection system [Snort] and a SIEM [IBM QRadar].

Agenda

• Introduction to Ansible Security Automation
• How Ansible integrates with security products
• Explore the lab environment:
  • Ansible execution host
  • Enterprise Firewall: Check Point Next Generation Firewall
  • IDS: Snort
  • SIEM: IBM QRadar
• Automate security platforms:
  • Execute your first security automation playbook - meet Check Point NGFW
  • Execute a security automation playbook targeting Snort IDS
  • Execute a security automation playbook targeting IBM QRadar
• Tie the 3 technologies together:
  • Use case 1: Investigation Enrichment
  • Use case 2: Threat hunting
  • Use case 3: Incident response

---

Virtual workshop details

Date: February 9, 2021

Time: 8:30 a.m. - 3:30 p.m. EST

Any questions? Please email sflahert@redhat.com

---

Sponsor